Work

Clark-Wilson policies in ACP : controlling information flow between solid apps

Year: 2025

Type: article

Abstract: This paper explains how to avoid certain unintended information flows between apps connected to the same Solid pod. We draw attention to threats faced if security policies for Solid pods omit the identities of clients, resulting in confidential information intended for one app leaking to other apps. We also explain good practice usage of ACP for avoiding such insecure configurations and draw parallels with the famous Clark-Wilson policy model for enterprise security. We propose that trusted apps enforcing security policy models should be developed so that pod owners need not be policy experts to operate secure pods.

Source: Strathprints: The University of Strathclyde institutional repository (University of Strathclyde)

Authors: Forsyth, Ellie, Horne, Ross

Institution: University of Strathclyde

Language: English

Topic: Access Control and Trust

Subfield: Sociology and Political Science

Field: Social Sciences

Domain: Social Sciences

Open Access status: green

OpenAlex ID: W7017958308

FWCI:

Cites:

Cited by:

Related to: